{
    "properties": {
        "database": {
            "description": "OpenLDAP database configuration properties",
            "properties": {
                "additional_modules": {
                    "description": "Comma-separated list of modules to load.",
                    "type": "string"
                },
                "additional_schemas": {
                    "description": "Loads additional schemas provided in the slapd package.",
                    "type": "string"
                },
                "admin_password": {
                    "default": "password",
                    "description": "Administrator password.",
                    "type": "string"
                },
                "config_password": {
                    "default": "password",
                    "description": "Allows password protected access to the dn=config branch. This helps to reconfigure the server without interruption.",
                    "type": "string"
                },
                "domain": {
                    "default": "example.org",
                    "description": "LDAP domain.",
                    "type": "string"
                },
                "force_reconfigure": {
                    "default": false,
                    "description": "Reconfigure the service after the image has been initialized.",
                    "type": "boolean"
                },
                "organization": {
                    "default": "example",
                    "description": "Organization name.",
                    "type": "string"
                }
            },
            "type": "object"
        },
        "networking": {
            "description": "OpenLDAP networking configuration properties",
            "properties": {
                "external_access": {
                    "description": "Enable access from outside the cluster through Marathon-LB.\nNOTE: this connection is unencrypted.",
                    "properties": {
                        "enable": {
                            "default": false,
                            "description": "Enable or disable creating a VIP for external access through a public node running Marathon-LB.",
                            "type": "boolean"
                        },
                        "external_access_port": {
                            "default": 10389,
                            "description": "For external access, port number to be used for clear communication in the external Marathon-LB load balancer",
                            "type": "number"
                        }
                    },
                    "type": "object"
                },
                "host_mode": {
                    "default": false,
                    "description": "Enable or disable host networking mode. NOTE: this requires the default port to be available on the target host **THIS IS CURRENTLY NOT THE CASE IN A DEFAULT DC/OS INSTALLATION**. This also forces to have a single instance per node.",
                    "type": "boolean"
                },
                "port": {
                    "default": 389,
                    "description": "Port number to be used for clear communication internally to the cluster.",
                    "type": "number"
                }
            },
            "type": "object"
        },
        "openldap": {
            "description": "OpenLDAP service configuration properties",
            "properties": {
                "cpus": {
                    "default": 0.3,
                    "description": "CPU shares to allocate to each service instance.",
                    "minimum": 0.3,
                    "type": "number"
                },
                "mem": {
                    "default": 256.0,
                    "description": "Memory to allocate to each service instance.",
                    "minimum": 128.0,
                    "type": "number"
                }
            },
            "required": [
                "cpus",
                "mem"
            ],
            "type": "object"
        },
        "service": {
            "description": "DC/OS service configuration properties",
            "properties": {
                "name": {
                    "default": "openldap",
                    "description": "Name of this service instance.",
                    "type": "string"
                }
            },
            "type": "object"
        },
        "storage": {
            "description": "OpenLDAP storage configuration properties",
            "properties": {
                "host_volume": {
                    "default": "/tmp",
                    "description": "If using non-persistent volumes (local volumes), this sets the location of a volume on the host to be used for the service. The final location will be derived from this value plus the name set in `name` (e.g. `/mnt/host_volume/service_name`). This can be a mounted NFS drive. Note that this path must be the same on all DC/OS agents. NOTE: if you don't change the default /tmp value, YOUR DATA WILL NOT BE SAVED IN ANY WAY.",
                    "type": "string"
                },
                "persistence": {
                    "description": "Enable persistent storage.",
                    "properties": {
                        "enable": {
                            "default": false,
                            "description": "Enable or disable data persistence.",
                            "type": "boolean"
                        },
                        "external": {
                            "description": "External persistent storage properties",
                            "properties": {
                                "driver": {
                                    "default": "rexray",
                                    "description": "Volume driver to use for storage. The default value should be correct for most use cases.",
                                    "type": "string"
                                },
                                "enable": {
                                    "default": false,
                                    "description": "Enable or disable external persistent storage. The `persistence` option must also be selected. Please note that for these to work, your DC/OS cluster MUST have been installed with the right options in `config.yaml`. Also, please note this requires a working  configuration file for the driver (e.g. `rexray.yaml`).",
                                    "type": "boolean"
                                },
                                "provider": {
                                    "default": "dvdi",
                                    "description": "Provider of the external persistent volume. The default value should be correct for most use cases.",
                                    "type": "string"
                                },
                                "volume_name": {
                                    "default": "openldap",
                                    "description": "Name that your volume driver uses to look up your external volume. When your task is staged on an agent, the volume driver queries the storage service for a volume with this name. If one does not exist, it is created implicitly. Otherwise, the existing volume is reused.",
                                    "type": "string"
                                }
                            },
                            "type": "object"
                        },
                        "ldap_volume_size": {
                            "default": 256,
                            "description": "Size in MBs of the volume to be created for the LDAP database",
                            "type": "number"
                        },
                        "slapd_volume_size": {
                            "default": 64,
                            "description": "Size in MBs of the volume to be created for internal storage of the SLAPD daemon.",
                            "type": "number"
                        }
                    },
                    "type": "object"
                }
            },
            "type": "object"
        }
    }
}